2773 matches found
CVE-2008-2088
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
CVE-2008-1261
The Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI...
CVE-2008-1261
The CVE-2008-1261 entry affects the Zyxel P-2602HW-D1A router (firmware 3.40(AJZ.1)). The vulnerability arises because the device’s admin page responses differ based on whether a user is logged in, enabling remote attackers to learn the current login status by requesting an arbitrary admin URI. T...
CVE-2008-1261: Undefined Security Weakness
The Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI...
authentix-xss.txt
Description: "Form-based or 100% cookie-free "Basic Authentication" website protection while keeping your NT Users Names and Passwords private. Protect all files, not just ASP pages. Validate against internal database, text file or external ODBC datasource." - www.flicks.com Summary: The Authenti...
CVE-2008-0823
Technical details are not publicly provided in the supplied documents for CVE-2008-0823; monitor for updates.
Sql injection
SQL injection vulnerability in admin/SAshipFedExMeter.asp in CandyPress CP 4.1.1.26, and earlier 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the FedExAccount parameter...
CVE-2008-0737
SQL injection vulnerability in admin/utilitiesConfigHelp.asp in CandyPress CP 4.1.1.26, and other 4.x and 3.x versions, allows remote attackers to execute arbitrary SQL commands via the helpfield parameter...
foojan-sql.txt
Foojan WMS 1.0 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.iranscripts.com/download/Foojan-WMS1.0%20Full.rar Injection Adress : http://Sitename/index.php?story=SQL CODE SQL CODE :...
Foojan Wms 1.0 - story SQL Injection
Foojan Wms 1.0 - story SQL Injection Foojan WMS 1.0 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.iranscripts.com/download/Foojan-WMS1.0%20Full.rar Injection Adress : http://Sitename/index.php?story=SQL CODE SQL CODE :...
Foojan WMS 1.0 (index.php story) Remote SQL Injection Vulnerability
No description provided by source. Foojan WMS 1.0 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.iranscripts.com/download/Foojan-WMS1.0%20Full.rar Injection Adress : http://Sitename/index.php?story=SQL CODE SQL CODE :...
Foojan WMS 1.0 (index.php story) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Foojan WMS 1.0 index.php story Remote SQL Injection Vulnerability =================================================================== Foojan WMS 1.0 Remote Sql Injection B...
CVE-2008-0192: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to 1 wp-admin/post.php or 2 wp-admin/page-new.php...
CVE-2007-6658
SQL injection vulnerability in admin.php/vars.php in CustomCMS CCMS 3.1 Demo allows remote attackers to execute arbitrary SQL commands via the p parameter in the Console page...
CVE-2007-6542
PHP remote file inclusion vulnerability in admin/frontpageright.php in Arcadem LE 2.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadadminpage parameter...
CVE-2007-6464
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the grootdir parameter to 1 adminpageopen.php and 2 clientpageopen.php in global/templates/...
Sql injection
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the pword aka Password parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-6163
CVE-2007-6163: Concrete details across connected sources show a SQL injection vulnerability in admin/index2.asp of GOUAE DWD Realty. The pword (Password) parameter is exploitable to execute arbitrary SQL commands, enabling remote attackers to interact with the database. Related entries also note ...
CVE-2007-6169
SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname parameter, a different vector than CVE-2007-6163. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...